MIME-Version: 1.0
References: <a1b5e303-66f9-4992-9d9b-0213c1c6bef7@hot.ee>
In-Reply-To: <a1b5e303-66f9-4992-9d9b-0213c1c6bef7@hot.ee>
From: Dominique Devienne <ddevienne@gmail.com>
Date: Tue, 3 Sep 2024 16:49:50 +0200
Message-ID: <CAFCRh-9RoXXrtMMmpYAi50D028kcbd982w1xN-Ev9utMTT5bMg@mail.gmail.com>
Subject: Re: How to grant role to other user
To: Andrus <kobruleht2@hot.ee>
Cc: pgsql-general <pgsql-general@postgresql.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://www.postgresql.org/message-id/CAFCRh-9RoXXrtMMmpYAi50D028kcbd982w1xN-Ev9utMTT5bMg%40mail.gmail.com>
Precedence: bulk

On Tue, Sep 3, 2024 at 4:31=E2=80=AFPM Andrus <kobruleht2@hot.ee> wrote:
>     GRANT "eeva_owner" TO "ingmar.e"
> This command throws error
>  ERROR: permission denied to grant role "eeva_owner"

Works are expected when I try it. FWIW. --DD

c:\Users\ddevienne>psql service=3Dpau16
psql (17beta3, server 16.1)

ddevienne=3D> create role eeva_owner;
CREATE ROLE
ddevienne=3D> create role ingmar LOGIN CREATEROLE PASSWORD 'foo';
CREATE ROLE
ddevienne=3D> grant connect on database ddevienne to ingmar;
GRANT
ddevienne=3D> \q

c:\Users\ddevienne>psql "service=3Dpau16 user=3Dingmar"
Password for user ingmar:
psql (17beta3, server 16.1)

ddevienne=3D> create role "ingmar.e" LOGIN;
CREATE ROLE
ddevienne=3D> grant eeva_owner to "ingmar.e";
ERROR:  permission denied to grant role "eeva_owner"
DETAIL:  Only roles with the ADMIN option on role "eeva_owner" may
grant this role.
ddevienne=3D> \q

c:\Users\ddevienne>psql service=3Dpau16

ddevienne=3D> grant eeva_owner TO ingmar WITH ADMIN OPTION;
GRANT ROLE
ddevienne=3D> \q

c:\Users\ddevienne>psql "service=3Dpau16 user=3Dingmar"
Password for user ingmar:
psql (17beta3, server 16.1)

ddevienne=3D> grant eeva_owner to "ingmar.e";
GRANT ROLE
ddevienne=3D>